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DETAILED ACTION 

Continued Examination Under 37 CFR 1. 1 14 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .1 7(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.1 14. Applicant's submission filed on 17 May 
201 0 has been entered. In this amendment, claims 1 , 3, 5-8, 1 0-1 3,15,1 6, 23, and 24 
have been amended, and claim 4 as been canceled. 

2. Claims 1 -3 and 5-25 are presented for examination. 



Response to Arguments 

3. Applicant's arguments with respect to claims 1-3 and 5-25 have been considered 
but are moot in view of the new ground(s) of rejection. 

As to the amended claim 1 , it is argued by the applicant that Aboulhosn does not 
disclose providing a setting to management apparatus which indicated whether the 
existence of a device owned by the user is to be disclosed to others. The examiner 
respectfully disagrees. Aboulhosn discloses that the authentication server provides 
access information for another online member, where an online member can receive 
messages from other members (i.e. existence disclosed) and offline members cannot 
(i.e. existence not disclosed) (0015, lines 10-16, 18-23). Aboulhosn also discloses that 
a member goes online (i.e. indicate existence is to be disclosed) when the 
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authentication information provided to the authentication server is authenticated and 
that the authentication server notifies the group owners who can forward the notification 
(i.e. disclosure) to group members (0015, lines 18-23, 33-35). 

Information Disclosure Statement 

4. The information disclosure statement (IDS) submitted on 1 3 September 201 0 is 
in compliance with the provisions of 37 CFR 1 .97. Accordingly, the information 
disclosure statement is being considered by the examiner. 

Claim Rejections - 35 USC § 101 

5. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 1 1 and 24 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. 

Claims 1 1 and 24 are rejected under 35 U.S.C. 101 as not falling within one of 
the four statutory categories of invention. Claims 1 1 and 24 recite "A computer 
readable storage medium" which typically covers forms of non-transitory tangible media 
and transitory propagating signals perse in view of the ordinary and customary 
meaning of computer readable media. Therefore, claims 1 1 and 24 are considered to 
be non-statutory. It is noted that adding the limitation "non-transitory" to the claims 
would exclude transitory propagating signals perse and would thus make the claims 
statutory. 
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Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 1 -3, 5-8, 1 0-20, and 23-25 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Imazu (US 2002/0087892 A1) and in view of Aboulhosn et al. (US 
2004/0068524 A1 and Aboulhosn hereinafter) and further in view of Brickell et al. (US 
2003/0115142 A1 and Brickell hereinafter). 

As to claims 1, 10-12, 23 and 24, Imazu discloses a system and method for 
authentication, the system and method having: 

receiving, at the service utilizing apparatus, registration completion 
information (i.e. login screen display) transmitted from the management 
apparatus after completing registration with the first user identification 
information, the first password, and the first apparatus name (0065, lines 5- 
9; 0072, lines 1-3). 

managing the service utilizing apparatus by the management 
apparatus (001 4, lines 3-9, 1 1 -13). 
Imazu fails to specifically disclose: 

transmitting, from a service utilizing apparatus, registration 
information to a management apparatus according to an external input, the 
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registration information including a first user identification information for 
use in utilizing a service in the service utilizing apparatus together with a 
first password corresponding to the first user identification information, 
wherein the management apparatus stores second user identification 
information for at least a second apparatus, and the first user identification 
information is set to be different than the second user identification 
information; 

subsequently transmitting, from the service utilizing apparatus, a 
first apparatus name of the service utilizing apparatus to the management 
apparatus, the first apparatus name being selected by a user of the service 
utilizing apparatus and is selected independently of any apparatus names 
selected for the second apparatus such that the first apparatus name is 
allowed to be the same as an apparatus name selected for the second 
apparatus; 

transmitting, from the service utilizing apparatus to the management 
apparatus, disclosure setting information indicating whether or not the 
existence of the service utilizing apparatus registered in the management 
apparatus is to be disclosed to other users. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses a system and method for peer-to-peer file sharing, the system and 
method having: 



Application/Control Number: 1 0/561 ,1 87 Page 6 

Art Unit: 2431 

transmitting, from the service utilizing apparatus to the management 
apparatus, disclosure setting information indicating whether or not the 
existence of the service utilizing apparatus registered in the management 
apparatus is to be disclosed to other users (0015, lines 18-23, 33-35). 
Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by registering an 
apparatus with disclosure information. Aboulhosn recites motivation by disclosing that 
registering an apparatus with information regarding its group membership ensures that 
a computer system is authorized to be a member (0016, lines 5-7). It is obvious that the 
teachings of Aboulhosn would have improved the teachings of Imazu by registering an 
apparatus with membership information in order to ensure that a computer is authorized 
to be a member. 

Imazu in view of Aboulhosn fails to specifically disclose: 

transmitting, from a service utilizing apparatus, registration 
information to a management apparatus according to an external input, the 
registration information including a first user identification information for 
use in utilizing a service in the service utilizing apparatus together with a 
first password corresponding to the first user identification information, 
wherein the management apparatus stores second user identification 
information for at least a second apparatus, and the first user identification 
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information is set to be different than the second user identification 
information; 

subsequently transmitting, from the service utilizing apparatus, a 
first apparatus name of the service utilizing apparatus to the management 
apparatus, the first apparatus name being selected by a user of the service 
utilizing apparatus and is selected independently of any apparatus names 
selected for the second apparatus such that the first apparatus name is 
allowed to be the same as an apparatus name selected for the second 
apparatus. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu in view of Aboulhosn, as taught by 
Brickell. 

Brickell discloses a system and method for providing authentication service, the system 

and method having: 

transmitting, from a service utilizing apparatus, registration 
information to a management apparatus according to an external input, the 
registration information including a first user identification information for 
use in utilizing a service in the service utilizing apparatus together with a 
first password corresponding to the first user identification information, 
wherein the management apparatus stores second user identification 
information for at least a second apparatus, and the first user identification 
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information is set to be different than the second user identification 
information (0035, lines 3-5, 7-10); 

subsequently transmitting, from the service utilizing apparatus, a 
first apparatus name of the service utilizing apparatus to the management 
apparatus, the first apparatus name being selected by a user of the service 
utilizing apparatus and is selected independently of any apparatus names 
selected for the second apparatus such that the first apparatus name is 
allowed to be the same as an apparatus name selected for the second 
apparatus (0035, lines 17-22). 
Given the teaching of Brickell, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Imazu in view of Aboulhosn with the teachings of Brickell by 
transmitting unique user identification with a password and then an apparatus name. 
Brickell recites motivation by disclosing that registering a unique user with a non-unique 
apparatus name provides for an authentication system where users are provided 
access from many different locations such as a hospital, office, and a home computer 
(0006, lines 9-14). It is obvious that the teachings of Brickell would have improved the 
teachings of Imazu in view of Aboulhosn by registering a user with a user identification, 
password, and apparatus name in order to allow for the user to be authenticated from 
different locations using available authentication devices. 



As to claim 13, Imazu discloses: 
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wherein in the registering, if the first user identification information, 
the first password, and the first apparatus name received from a first 
service utilizing apparatus are associated and registered (0014, lines 3-9, 
11-13), 

but does not explicitly disclose: 

a second user identification information, a second password, and a 
second apparatus name identical to the first apparatus name are received 
from a second service utilizing apparatus, and the second user 
identification information is different from the user identification 
information, then the second user identification information, the second 
password, and the second apparatus name are associated with one 
another and registered. It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to register a second user on the same 
terminal using different user information since it was known in the art that 
personal authentication using user name and password is needed in a multi-user 
computer system or network to verify that the communicating party is real, as 
shown in Imazu (0006, lines 15-23). 



As to claims 2 and 14, Imazu discloses: 

receiving authentication request information comprising the first 
user identification information (i.e. login identifier) and the first password 
transmitted from the service utilizing apparatus (0014, lines 11-14); 
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performing an authentication process based on the received first 
user identification information and first password (0077, lines 1-6); 

transmitting authentication results (i.e. URL of registration screen) of 
the authentication process to the service utilizing apparatus as a result of 
transmitting the authentication results to the service utilizing apparatus 
(0072, lines 1-3); 
Imazu fails to specifically disclose: 

receiving contents identification information about at least 
predetermined contents data for request of the contents data transmitted 
from the service utilizing apparatus; 

transmitting the contents data corresponding to the received 
contents identification information to the service utilizing apparatus. 
Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses a system and method for peer-to-peer file sharing, the system and 
method having: 

receiving contents identification information (i.e. request for 
content/virtual file) about at least predetermined contents data for request of 
the contents data transmitted from the service utilizing apparatus (0013, 
lines 24-27); 
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transmitting the contents data corresponding to the received 
contents identification information to the service utilizing apparatus (0013, 
lines 26-27). 

Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by transmitting data 
according to an identifier. Aboulhosn recites motivation by disclosing that transmitting 
data that is stored at a location reduces the need for centralized file storage (0003, lines 
9-10). It is obvious that the teachings of Aboulhosn would have improved the teachings 
of Imazu by transmitting data according to an identifier in order to allow data to be 
stored at different locations while allowing them to be accessed. 

As to claims 3 and 15, Imazu fails to specifically disclose: 

transmitting apparatus name request information about a request for 
a name of the second apparatus registered as associated with the second 
user identification information different from the first user identification 
information to the service utilizing apparatus; 

receiving the name of the second apparatus transmitted according to 
the apparatus name request information from the management apparatus; 
displaying the received name of the second apparatus. 
Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
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Aboulhosn discloses a system and method for peer-to-peer file sharing, the system and 
method having: 

transmitting apparatus name request information about a request for 
a name of the second apparatus registered as associated with the second 
user identification information different from the first user identification 
information to the service utilizing apparatus (0015, lines 21-23); 

receiving the name of the second apparatus transmitted according to 
the apparatus name request information from the management apparatus 
(0014, lines 2-6); 

displaying the received name of the second apparatus (0020, lines 3- 

7). 

Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by receiving and 
displaying another apparatus name. Aboulhosn recites motivation by disclosing that 
receiving and displaying other apparatus names allows files to be shared with groups 
(001 4, lines 3-4) and for a user to view the shared file structure (001 9, lines 1 -3). It is 
obvious that the teachings of Aboulhosn would have improved the teachings of Imazu in 
by receiving and displaying another apparatus name in order to allow for files to be 
shared and for the file structure to be viewed. 

As to claim 16, Imazu fails to specifically disclose: 
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registering the received disclosure setting information and the 
apparatus name of the service utilizing apparatus as associated with each 
other. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses: 

registering the received disclosure setting information and the 

apparatus name of the service utilizing apparatus as associated with each 

other (0016, lines 20-21). 
Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by registering an 
apparatus with disclosure information. Aboulhosn recites motivation by disclosing that 
registering an apparatus with information regarding its group membership ensures that 
a computer system is authorized to be a member (0016, lines 5-7). It is obvious that the 
teachings of Aboulhosn would have improved the teachings of Imazu by registering an 
apparatus with membership information in order to ensure that a computer is authorized 
to be a member. 

As to claims 5 and 1 7, Imazu fails to specifically disclose: 
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receiving the name of the second apparatus set to be published 
among the names of second apparatuses registered as associated with 
second user identification information. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses: 

receiving the name of the second apparatus set to be published 
among the names of second apparatuses registered as associated with 
second user identification information (0016, lines 20-21). 
Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by receiving the 
name of another apparatus to be registered. Please refer to the motivation recited 
above in respect to claim 1 as to why it is obvious to apply the teachings of Aboulhosn 
to the teachings of Imazu. 

As to claims 6 and 18, Imazu fails to specifically disclose: 

receiving distribution request information which is transmitted from 
the service utilizing apparatus as a distribution requester of predetermined 
contents data and comprising the apparatus name of the service utilizing 
apparatus, contents identification information about the contents data, and 
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the second apparatus name of the second service utilizing apparatus which 
is a provider of the contents data; 

transmitting the contents data according to the received distribution 
request information to the second service utilizing apparatus. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses: 

receiving distribution request information which is transmitted from 
the service utilizing apparatus as a distribution requester (i.e. file sharing 
system) of predetermined contents data and comprising the apparatus 
name of the service utilizing apparatus, contents identification information 
about the contents data, and the second apparatus name of the second 
service utilizing apparatus which is a provider of the contents data (0013, 
lines 24-27); 

transmitting the contents data according to the received distribution 
request information to the second service utilizing apparatus (0013, lines 
26-27). 

Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by transferring 
information to a requested apparatus. Aboulhosn recites motivation by disclosing that 
providing a copy of a file to an accessing member allows peer-to-peer file sharing 
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(0013, lines 13-14), reducing the need for a centralized storage space (0003, lines 9- 
1 0). It is obvious that the teachings of Aboulhosn would have improved the teachings of 
Imazu by transferring data to a requested system in order to allow file sharing and 
reduce the amount of centralized storage space needed. 

As to claim 7, Imazu discloses: 

transmitting the second user identification information and a second 
password to the management apparatus (0014, lines 10-13). 

Imazu fails to specifically disclose: 

displaying information about a second apparatus name 
corresponding to the second user identification information and the 
second password in an authentication reply transmitted from the 
management apparatus. 

Nonetheless, this feature is well known in the art and would have been an obvious 

modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 

Aboulhosn discloses: 

displaying information about a second apparatus name (i.e. computer 
system identifier) corresponding to the second user identification 
information and the second password in an authentication reply 
transmitted from the management apparatus (0020, lines 3-7). 

Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 

the invention would have readily recognized the desirability and advantages of 



Application/Control Number: 1 0/561 ,1 87 Page 1 7 

Art Unit: 2431 

modifying the teachings of Imazu with the teachings of Aboulhosn by displaying 
information about an apparatus. Aboulhosn recites motivation by disclosing that sharing 
apparatus information allows other group members to be notified of newly shared or 
modified files (001 3, lines 27-29). It is obvious that the teachings of Aboulhosn would 
have improved the teachings of Imazu by sharing apparatus information in order to 
update file sharing information with group members. 

As to claim 8, Imazu discloses: 

transmitting the second user identification information and a second 
password to the management apparatus (0014, lines 10-13). 
Imazu fails to specifically disclose: 

displaying information about the service used in the apparatus name 
of the service utilizing apparatus in an authentication reply transmitted 
from the management apparatus according to the second identification 
information about the service; 

transmitting information for permission of deleting the apparatus 
name registered in the management apparatus according to an external 
input. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses: 
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displaying information about the service used in the apparatus name 
of the service utilizing apparatus in an authentication reply transmitted 
from the management apparatus according to the second identification 
information about the service (0019, lines 1-5); 

transmitting information for permission of deleting the apparatus 
name registered in the management apparatus according to an external 
input (0018, lines 1-3). 
Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by displaying file 
sharing information and transmitting apparatus deletion information. Aboulhosn recites 
motivation by disclosing that displaying file sharing information provides a user interface 
for the shared file structure (0019, lines 11-13) and providing deletion information allows 
file synchronization to be suspended (0018, line 6). It is obvious that the teachings of 
Aboulhosn would have improved the teachings of Imazu by displaying service 
information and providing deletion information in order to provide a user interface and 
suspend file synchronization. 

As to claim 19, Imazu discloses: 

authenticating the first user identification information and the first 
password transmitted from the service utilizing apparatus (0077, lines 1-6). 
Imazu fails to specifically disclose: 
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transmitting information about an apparatus name corresponding to 
the first user identification information and the first password to the 
service utilizing apparatus together with an authentication reply 
corresponding to the authentication. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses: 

transmitting information about an apparatus name corresponding to 
the first user identification information and the first password to the 
service utilizing apparatus together with an authentication reply 
corresponding to the authentication (0015, lines 4-7; 0016, lines 20-23). 
Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by transferring 
information about an apparatus with user information. Please refer to the motivation 
recited above in respect to claim 7 as to why it is obvious to apply the teachings of 
Aboulhosn to the teachings of Imazu. 

As to claim 20, Imazu discloses: 

authenticating the first user identification information and the first 
password transmitted from the service utilizing apparatus (0077, lines 1-6). 
Imazu fails to specifically disclose: 
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transmitting identification information about a service used by the 
first apparatus name of the service utilizing apparatus together with an 
authentication reply to the service utilizing apparatus. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses: 

transmitting identification information about a service used by the 
first apparatus name of the service utilizing apparatus together with an 
authentication reply to the service utilizing apparatus (0016, lines 20-23; 
0015, lines 4-7; 0019, lines 1-5). 
Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by sending 
information about file sharing (i.e. service) of an apparatus. Please refer to the 
motivation recited above in respect to claim 8 as to why it is obvious to apply the 
teachings of Aboulhosn to the teachings of Imazu. 

As to claim 25, Imazu discloses: 

the first registration information transmitting means transmits the 
first user identification information (i.e. login identifier) and the first 
password as authentication request information to the management 
apparatus (0014, lines 11-14). 
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8. Claims 9 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Imazu in view of Aboulhosn and Brickell as applied to claims 1 and 13 above, further in 
view of Oho et al. (US 2002/0184515 A1 and Oho hereinafter). 
As to claims 9 and 21 , Imazu fails to specifically disclose: 

storing the first apparatus name. 
Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu, as taught by Aboulhosn. 
Aboulhosn discloses: 

storing the first apparatus name (0024, lines 21-23). 
Given the teaching of Aboulhosn, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu with the teachings of Aboulhosn by storing an 
apparatus name. Aboulhosn recites motivation by disclosing that storing a list of 
registered computer systems allows a user to identify the computer system to be invited 
to join a group (0027, lines 5-10). It is obvious that the teachings of Aboulhosn would 
have improved the teachings of Imazu by storing an apparatus name in order to provide 
a list of registered computer systems for use by a user. 

Imazu in view of Aboulhosn and Brickell fails to specifically disclose: 
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transmitting deletion permission request information about a request 
for permission of deleting the first stored apparatus name to the 
management apparatus; 

receiving deletion permission information for permission of deleting 
the first apparatus name according to the deletion permission request 
information transmitted from the management apparatus; 

deleting the stored first apparatus name according to the received 
deletion permission information; 

transmitting, to the management apparatus, deletion request 
information about a request for deletion of the first apparatus name 
registered in the management apparatus; 

receiving deletion completion information transmitted after 
completing deleting the first apparatus name and notification information 
according to the deletion request information from the management 
apparatus. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu in view of Aboulhosn and Brickell, as 
taught by Oho. 

Oho discloses a system and method for rights management, the system and method 
having: 



Application/Control Number: 1 0/561 ,1 87 Page 23 

Art Unit: 2431 

transmitting deletion permission request information about a request 
for permission of deleting the first stored apparatus name to the 
management apparatus (0237, lines 9-1 1 ); 

receiving deletion permission information for permission of deleting 
the first apparatus name according to the deletion permission request 
information transmitted from the management apparatus (0238, lines 1-3); 

deleting the stored first apparatus name according to the received 
deletion permission information (0239, lines 2-4); 

transmitting, to the management apparatus, deletion request 
information about a request for deletion of the first apparatus name 
registered in the management apparatus (0238, lines 6-11); 

receiving deletion completion information transmitted after 
completing deleting the first apparatus name and notification information 
according to the deletion request information from the management 
apparatus (0240, lines 2-7). 
Given the teaching of Oho, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Imazu in view of Aboulhosn and Brickell with the teachings of Oho by 
deleting an apparatus and sending a deletion confirmation. Oho recites motivation by 
disclosing that deleting an identifier from a rights database is used to control license 
information (0237, lines 3-6) and transmitting a deletion confirmation notifies the user 
that the identifier has been correctly deleted (0241 , lines 8-1 1 ). It is obvious that the 
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teachings of Oho would have improved the teachings of Imazu in view of Aboulhosn 
and Brickell by deleting an apparatus name and providing deletion confirmation in order 
to control licensing information and confirm proper deletion. 

9. Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over Imazu in 
view of Aboulhosn and Brickell as applied to claim 14 above, and further in view of 
Bradee (US 2002/0095571 A1) and Satyavolu et al. (US 2003/0191964 A1 and 
Satyavolu hereinafter). 

As to claim 22, Imazu in view of Aboulhosn and Brickell fails to specifically disclose: 
performing a user authentication process based on the first user 
identification information and the first password received in the 
authentication request information receiving, issuing an authentication 
session ID which is a session ID with the service utilizing apparatus when 
authentication is allowed, and transmitting the issued authentication 
session ID to the service utilizing apparatus; 

receiving the authentication session ID returned from the service 
utilizing apparatus, receiving identification information for identification of 
the server providing the contents, performing a user authentication 
process based on the received authentication session ID, issuing an 
authentication ticket corresponding to the received identification 
information when the authentication is allowed, and transmitting the issued 
authentication ticket to the service utilizing apparatus; 
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receiving from the server an authentication ticket transmitted from 
the service utilizing apparatus to the server and then performing an 
authentication process, and transmitting information about certification 
acknowledgement when the authentication is allowed to the server; 

issuing a service session ID which is a session ID with the service 
utilizing apparatus according to the received information about certification 
acknowledgement, and transmitting the issued service session ID to the 
service utilizing apparatus, wherein, 

in the receiving, the server receives the service session ID and the 
contents identification information; 

in the transmitting, the authentication process is performed based 
on the received service session ID, and the contents data corresponding to 
the contents identification information is transmitted to the service using 
apparatus when the authentication is allowed. 
Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Imazu in view of Aboulhosn and Brickell, as 
taught by Bradee. 

Bradee discloses a system and method for providing system-wide computer application 
security using role-based identifiers, the system and method having: 

performing a user authentication process based on the first user 
identification information and the first password received in the 
authentication request information receiving, issuing an authentication 
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session ID which is a session ID with the service utilizing apparatus when 
authentication is allowed, and transmitting the issued authentication 
session ID to the service utilizing apparatus (0041, lines 1-8); 

issuing a service session ID which is a session ID (i.e. surrogate ID) 
with the service utilizing apparatus according to the received information 
about certification acknowledgement, and transmitting the issued service 
session ID to the service utilizing apparatus (0042, lines 2-3, 5-6), wherein, 

in the receiving, the server receives the service session ID (i.e. 
surrogate ID) and the contents identification information (i.e. resource name) 
(0042, lines 17-19); 

in the transmitting, the authentication process is performed based 
on the received service session ID (i.e. surrogate ID) , and the contents data 
corresponding to the contents identification information is transmitted to 
the service using apparatus when the authentication is allowed (i.e. 
permitting access) (0042, lines 13-16, 34-36). 
Given the teaching of Bradee, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Imazu in view of Aboulhosn and Brickell with the teachings of Bradee 
by using a session ID and service session ID in the authentication process to transmit 
data. Bradee recites motivation by disclosing that using a session ID and surrogate ID 
to control access to data allows the data to be accessed for a certain amount of time 
before expiration (0043, lines 7-1 1 ). It is obvious that the teachings of Bradee would 
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have improved the teachings of Imazu in view of Aboulhosn and Brickell by using a 
session ID and surrogate ID to allow access to data in order to limit access to a certain 
amount of time. 

Imazu in view of Aboulhosn, Brickell and Bradee fails to specifically disclose: 

receiving the authentication session ID returned from the service 
utilizing apparatus, receiving identification information for identification of 
the server providing the contents, performing a user authentication 
process based on the received authentication session ID, issuing an 
authentication ticket corresponding to the received identification 
information when the authentication is allowed, and transmitting the issued 
authentication ticket to the service utilizing apparatus; 

receiving from the server an authentication ticket transmitted from 
the service utilizing apparatus to the server and then performing an 
authentication process, and transmitting information about certification 
acknowledgement when the authentication is allowed to the server. 

Nonetheless, these features are well known in the art and would have been an obvious 

modification of the teachings disclosed by Imazu in view of Aboulhosn, Brickell and 

Bradee, as taught by Satyavolu. 

Satyavolu discloses a system and method for verifying the identity of a user for session 
authentication purposes during web navigation, the system and method having: 



Application/Control Number: 1 0/561 ,1 87 Page 28 

Art Unit: 2431 

receiving the authentication session ID returned from the service 
utilizing apparatus, receiving identification information for identification of 
the server providing the contents, performing a user authentication 
process based on the received authentication session ID, issuing an 
authentication ticket (i.e. UNS token) corresponding to the received 
identification information when the authentication is allowed, and 
transmitting the issued authentication ticket to the service utilizing 
apparatus (0030, lines 1-7; 0031, lines 1-2); 

receiving from the server an authentication ticket (i.e. UNS token) 
transmitted from the service utilizing apparatus to the server and then 
performing an authentication process, and transmitting information about 
certification acknowledgement when the authentication is allowed to the 
server (0031, lines 7-9). 
Given the teaching of Satyavolu, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Imazu in view of Aboulhosn, Brickell and Bradee with the 
teachings of Satyavolu by using a ticket for authentication. Satyavolu recites motivation 
by disclosing that a ticket allows a user to avoid traditional authentication login 
requirements for a certain amount of time (0031 , lines 9-1 2). It is obvious that the 
teachings of Satyavolu would have improved the teachings of Imazu in view of 
Aboulhosn, Brickell and Bradee by using a ticket in order to allow a user to bypass 
traditional login requirements for a given amount of time. 
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Prior Art Made of Record 

1 0. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Abgrall et al. (US 2003/0037237 A1 ) discloses a system and method for 
computer device authentication. 

b. Aoki et al. (US 2004/01 65206 A1 ) discloses a system and method for 
device management. 

c. Freedman et al. (US 2002/00831 23 A1 ) discloses a system and method 
for accessing network resources. 

d. Karaoguz et al. (US 2004/01 1 7660 A1 ) discloses a system and method for 
theft prevention of media peripherals. 

e. Katsube et al. (US 2004/0249961 A1 ) discloses a system and method for 
authentication processing. 

f. Kiyosu et al. (US 2004/0208500 A1 ) discloses a system and method for 
supporting print service. 

g. Matsuyama et al. (US Patent 6,574,61 1 B1 ) discloses a system and 
method for registering users to a system. 

h. Owen et al. (US 2004/01 8701 8 A1 ) discloses a system and method for 
multi-factor authentication. 

i. Rao et al. (US 2008/01 3371 6 A1 ) discloses a system and method for 
providing services. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Sarah Su whose telephone number is (571) 270-3835. 
The examiner can normally be reached on Monday through Friday 7:30AM-5:00PM 
EST.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on (571) 272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Sarah Su/ /William R. Korzuch/ 

Examiner, Art Unit 2431 Supervisory Patent Examiner, Art Unit 2431 



